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1. (Previously Presented) A method, comprising: 

receiving a request for a service from a requestor over a bi-directional channel; 
authenticating the requestor; 

transmitting first decryption information to the requestor over the bi-directional 
channel, wherein the first decryption information decrypts the service; 

transmitting the service, encrypted with encryption information corresponding to 
the first decryption information, over a unidirectional channel; 

generating second decryption information for use in decrypting the service; 

encrypting the second decryption information with the encryption information 
corresponding to the first decryption information; 

transmitting the second decryption information, encrypted with the encryption 
information corresponding to the first decryption information, over the unidirectional channel, 
wherein the second decryption information decrypts the service; and 

transmitting the service, encrypted with encryption information corresponding to 
the second decryption information rather than with encryption information corresponding to the 
first decryption information, over the unidirectional channel. 

2. (Original) The method of claim 1 wherein the first decryption information 
corresponds to a seed of a macro period and the second decryption information corresponds to a 
micro period of the macro period. 

3. (Original) The method of claim 2 wherein the micro period is a first micro 
period of the macro period. 
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4. (Original) The method of claim 1 wherein the second decryption information 
is transmitted as future decryption information. 

5. (Original) The method of claim 1 wherein the first decryption information and 
the second decryption information correspond to different micro periods of a macro period. 

6. (Original) The method of claim 1 further comprising: 

transmitting future decryption information over the bi-directional channel; and 
transmitting the service encrypted with encryption information corresponding to 

the future decryption information. 

7_ (Original) The method of claim 1 wherein the request for a service is a request 

for the service in its entirety or a time interval thereof. 

8. (Original) The method of claim 1 wherein the bidirectional channel is one of a 
wireless network. 

9. (Original) The method of claim 8 wherein the wireless network is a GSM 

network. 

10. (Original) The method of claim 8 wherein the wireless network is a 
Bluetooth network. 

11. (Original) The method of claim 1 wherein the unidirectional channel is one 
ofaDVB-T network. 

12. (Original) The method of claim 1 wherein the authenticating is performed 

using a SIM card number. 

13. (Original) The method of claim 1 wherein the authenticating is performed 

using a user ID and password. 
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14. (Original) The method of claim 1 wherein the authenticating is performed 

using IP authentication. 

15. (Original) The method of claim 14 wherein the IP authentication is a public 

key encryption scheme. 

16. (Original) The method of claim 1 wherein the first decryption information is 
transmitted to the requestor over the bidirectional channel before the service has begun. 

17. (Original) The method of claim 1 wherein generating second decryption 
information involves changing a decryption key, a decryption parameter and/or a decryption 
algorithm of the first decryption information. 

18. (Original) The method of claim 1 further comprising: 

transmitting synchronization information for use by the requestor in determining 
when the second decryption information is valid. 

19. (Canceled) 

20. (Original) The method of claim 1 further comprising: 

re-transmitting the second decryption information over the unidirectional channel. 

21. (Previously Presented) A method, comprising: 

receiving a request for a service from a requestor over a bi-directional channel; 
authenticating the requestor; 

providing decryption information to the requestor over the bi-directional channel, 
wherein the decryption information decrypts the service; 

transmitting the service, encrypted with encryption information corresponding to 
the decryption information, over a unidirectional channel; 
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changing the decryption information needed to decrypt the service throughout the 

transmission of the service; 

encrypting the changed decryption information with encryption information 
corresponding to decryption information that was previously provided to the requestor; 

providing the requestor with the encrypted changed decryption information over 

the unidirectional channel; and 

transmitting the service, encrypted with encryption information corresponding to 
the changed decryption information rather than with encryption information corresponding to the 
decryption information sent over the bi-directional channel, over the unidirectional channel. 

22. (Canceled) 

23. (Previously Presented) The method of claim 21 wherein the previously 
provided decryption information was provided over the bidirectional channel. 

24. (Previously Presented) The method of claim 21 wherein the previously 
provided decryption information was provided over the unidirectional channel. 

25. (Previously Presented) A method, comprising: 
requesting a service over a bi-directional channel; 

transmitting authentication information over the bi-directional channel; 

receiving first decryption information over the bi-directional channel, wherein the 
first decryption information decrypts the service; 

receiving the service over a unidirectional channel, wherein the service is 
encrypted with encryption information corresponding to the first decryption information; 

decrypting the service using the first decryption information; 
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receiving second decryption information over the unidirectional channel, wherein 
the second decryption information is encrypted with the encryption information corresponding to 
the first decryption information; 

decrypting the encrypted second decryption information using the first decryption 

information; 

receiving the service over the unidirectional channel, wherein the service is 
encrypted with encryption information corresponding to the second decryption information; and 

decrypting the service using the second decryption information rather than the 
first decryption information. 

26. (Original) The method of claim 25, further comprising: 

upon completion of the service, requesting another service via the bi-directional 

channel. 

27. (Original) The method of claim 25, further comprising; 

decrypting the service with the first decryption information until unsuccessful and 
thereafter decrypting the service with the second decryption information. 

28. (Original) The method of claim 25 wherein the authentication includes a 
SIM card number. 

29. (Original) The method of claim 25 wherein the authentication includes a user 
ED and password, 

30. (Original) The method of claim 25 wherein the authentication includes IP 

authentication. 

31. (Original) The method of claim 30 wherein the IP authentication is a public 
key encryption scheme. 
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32. (Original) The method of claim 25 wherein the service is requested during a 
predetermined window of time. 

33. (Previously Presented) The method of claim 25, further comprising: 
determining whether the service has been dropped; 

if the service has been dropped, 

attempting to re-receive the service; 

upon re-receiving the service, determining whether either the first 
decryption information or the second decryption information is valid decryption information; 

if one of the first decryption information or the second decryption information is 
valid decryption information, 

decrypting the service with the valid decryption information. 

34. (Previously Presented) The method of claim 33, further comprising: 
upon re-receiving the service, if nether the first decryption information nor the 

second decryption information is valid decryption information, 

establishing a connection to the service provider via the bi-directional 

channel; 

transmitting authentication information over the bi-directional channel; 
receiving valid decryption information over the bi-directional channel; and 
decrypting the service using the valid decryption information. 

35. (Original) The method of claim 25, further comprising: 

receiving synchronization information for determining when the second 
decryption information is valid. 

36. (Original) The method of claim 25, farther comprising: 
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receiving and storing one or more future keys for decrypting the service after the 
first and second decryption information are no longer valid. 

37. (Canceled) 

38. (Canceled) 

39. (Previously Presented) A method, comprising: 
receiving a request for a service from a requestor; 
authenticating the requestor; 

transmitting first decryption information over a bidirectional channel for reception 
by the requestor, 

installing the first decryption information on a device of the requestor, wherein 
the first decryption information decrypts the service; 

transmitting the service, encrypted with encryption information corresponding to 
the first decryption information, over a unidirectional channel; 

generating second decryption information for use in decrypting the service at a 

later time; 

encrypting the second decryption information with the encryption information 
corresponding to the first decryption information; 

transmitting the encrypted second decryption information over the unidirectional 
channel for reception by the requestor, and 

transmitting the service, encrypted with encryption information corresponding to 
the second decryption information rather than with encryption information corresponding to the 
first decryption information, over the unidirectional channel. 

40. (Previously Presented) A method, comprising: 
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receiving a request for a service from a requestor over a bi-directional channel; 
authenticating the requestor; 

transmitting a first key to the requestor over the bi-directional channel for 



transmitting the service, encrypted with the first key, over a unidirectional 



generating a second key for decrypting the service; 
encrypting the second key with the first key; 

transmitting the encrypted second key over the unidirectional channel; and 
transmitting the service, encrypted with the second key rather than with the first 



key, over The unidirectional channel. 

41 . (Previously Presented) The method of claim 40 wherein, in addition to the 
first and second keys, at least one of an algorithm and a parameter are transmitted to the 
requestor to decrypt the service. 



42. (New) An apparatus, comprising: 
a service provider configured to: 

receive a request for a service from a requestor over a bi-directional channel; 
authenticate the requestor; 

transmit first decryption information to the requestor over the bi-directional 



channel, wherein the first decryption information decrypts the service; 

transmit the service, encrypted with encryption information corresponding to the 
first decryption information, over a unidirectional channel; 

generate second decryption information for use in decrypting the service; 



decrypting the service; 



channel; 
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encrypt the second decryption information with the encryption information 
corresponding to the first decryption information; 

transmit the second decryption information, encrypted with the encryption 
information corresponding to the first decryption information, over the unidirectional channel, 
wherein the second decryption information decrypts the service; and 

transmit the service, encrypted with encryption information corresponding to the 
second decryption information rather than with enciTption information corresponding to the first 
decryption information, over the unidirectional channel. 

43. (New) The apparatus of claim 42 wherein the first decryption information 
corresponds to a seed of a macro period and the second decryption information corresponds to a 
micro period of the macro period. 

44. (New) The apparatus of claim 43 wherein the micro period is a first micro 
period of the macro period. 

45. (New) The apparatus of claim 42 wherein the second decryption information 
is transmitted as future decryption information. 

46. (New) The apparatus of claim 42 wherein the first decryption information 
and the second decryption information correspond to different micro periods of a macro period. 

47. (New) The apparatus of claim 42 wherein the service provider is further 

configured to; 

transmit future decryption information over the bi-directional channel; and 
transmit the service encrypted with encryption information corresponding to the 
future decryption information. 
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48. (New) The apparatus of claim 42 wherein the request for a service is a 
request for the service in its entirety or a time interval thereof. 

49. (New) The apparatus of claim 42 wherein the bidirectional channel is one of 
a wireless network. 

50. (New) The apparatus of claim 49 wherein the wireless network is a GSM 

network, 

51. (New) The apparatus of claim 49 wherein the wireless network is a 
Bluetooth network. 

52. (New) The apparatus of claim 42 wherein the unidirectional channel is one 

of a DVB-T network. 

53. (New) The apparatus of claim 42 wherein the authenticating is performed 

using a SIM card number. 

54. (New) The apparatus of claim 42 wherein the authenticating is performed 

using a user ID and password 

55. (New) The apparatus of claim 42 wherein the authenticating is performed 

using IP authentication. 

56. (New) The apparatus of claim 55 wherein the IP authentication is a public 
key encryption scheme. 

57. (New) The apparatus of claim 42 wherein the first decryption information is 
transmitted to the requestor over the bidirectional channel before the service has begun. 

58. (New) The apparatus of claim 42 wherein generating second decryption 
information involves changing a decryption key, a decryption parameter and/or a decryption 
algorithm of the first decryption information. 
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59. (New) The apparatus of claim 42 wherein the service provider is further 

configured to: 

transmit synchronization information for use by the requestor in determining 
when the second decryption information is valid. 

60. (New) The apparatus of claim 42 wherein the service provider is further 

configured to: 

re-transmit the second decryption information over the unidirectional channel. 

61. (New) An apparatus, comprising: 
a service provider configured to: 

receive a request for a service from a requestor over a bi-directional channel; 
authenticate the requestor; 

provide decryption information to the requestor over the bi-directional channel, 
wherein the decryption information decrypts the service; 

transmit the service, encrypted with encryption information corresponding to the 
decryption information, over a unidirectional channel; 

change the decryption information needed to decrypt the service throughout the 
transmission of the service; 

encrypt the changed decryption information with encryption information 
corresponding to decryption information that was previously provided to the requestor; 

provide the requestor with the encrypted changed decryption information over the 
unidirectional channel; and 
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transmit the service, encrypted with encryption information corresponding to the 
changed decryption information rather than with encryption information corresponding to the 
decryption information sent over the bi-directional channel, over the unidirectional channel. 

62. (New) The apparatus of claim 61 wherein the previously provided decryption 
information is provided over the bidirectional channel. 

63. (New) The apparatus of claim 61 wherein the previously provided decryption 
information is provided over the unidirectional channel. 

64. (New) An apparatus, comprising: 
a client configured to: 

request a service over a bi-directional channel; 

transmit authentication information over the bi-directional channel; 

receive first decryption information over the bi-directional channel, wherein the 
first decryption information decrypts the service; 

receive the service over a unidirectional channel, wherein the service is encrypted 
with encryption information corresponding to the first decryption information; 

decrypt the service using the first decryption information; 

receive second decryption information over the unidirectional channel, wherein 
the second decryption information is encrypted with the encryption information corresponding to 
the first decryption information; 

decrypt the encrypted second decryption information using the first decryption 

information; 

receive the service over the unidirectional channel, wherein the service is 
encrypted with encryption information corresponding to the second decryption information; and 
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decrypt the service using the second decryption information rather than the first 
decryption information. 

65. (New) The apparatus of claim 64, wherein the client is further configured to: 
upon completion of the service, request another service via the hi-directional 

channel 

66. (New) The apparatus of claim 64, wherein the client is further configured to: 
decrypt the service with the first decryption information until unsuccessful and 

thereafter decrypt the service with the second decryption information. 

67. (New) The apparatus of claim 64 wherein the authentication includes a SIM 

card number. 

68. (New) The apparatus of claim 64 wherein the authentication includes a user 
ID and password. 

69. (New) The apparatus of claim 64 wherein the authentication includes IP 

authentication. 

70. (New) The apparatus of claim 69 wherein the IP authentication is a public 

key encryption scheme. 

71. (New) The apparatus of claim 64 wherein the service is requested during a 
predetermined window of time, 

72. (New) The apparatus of claim 64, wherein the client is further configured to: 
determine whether the service has been dropped; 

if the service has been dropped, 

attempt to re-receive the service; 
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upon re-receiving the service, determine whether either the first decryption 
information or the second decryption information is valid decryption information; 

if one of the first decryption information or the second decryption information is 
valid decryption information, 

decrypt the service with the valid decryption information, 

73. (New) The apparatus of claim 72, wherein the client is further configured to: 
upon re-receiving the service, if nether the first decryption information nor the 

second decryption information is valid decryption information, 

establish a connection to the service provider via the bi-directional 

channel; 

transmit authentication information over the bi-directional channel; 
receive valid decryption information over the bi-directional channel; and 
decrypt the service using the valid decryption information- 

74. (New) The apparatus of claim 64, wherein the client is further configured to: 
receive synchronization information for determining when the second decryption 

information is valid. 

75. (New) The apparatus of claim 64, wherein the client is further configured to: 
receive and store one or more future keys for decrypting the service after the first 

and second decryption information are no longer valid. 

76. (New) An apparatus, comprising: 
a service provider configured to: 

receive a request for a service from a requestor; 
authenticate the requestor; 
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transmit first decryption information over a bidirectional channel for reception by 

the requestor; 

install the first decryption information on a device of the requestor, wherein the 
first decryption information decrypts the service; 

transmit the service, encrypted with encryption information corresponding to the 
first decryption information, over a unidirectional channel; 

generate second decryption information for use in decrypting the service at a later 

time; 

encrypt the second decryption information with the encryption information 
corresponding to the first decryption information; 

transmit the encrypted second decryption information over the unidirectional 
channel for reception by the requestor, and 

transmit the service, encrypted with encryption information corresponding to the 
second decryption information rather than with encryption information corresponding to the first 
decryption information, over the unidirectional channel. 

77. (New) An apparatus, comprising: 

a service provider configured to: 

receive a request for a service from a requestor over a bi-directional channel; 
authenticate the requestor; 

transmit a first key to the requestor over the bi-directional channel for decrypting 

the service; 

transmit the service, encrypted with the first key, over a unidirectional channel; 
generate a second key for decrypting the service; 
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encrypt the second key with the first key; 

transmit the encrypted second key over the unidirectional channel; and 

transmit the service, encrypted with the second key rather than with the first key, 

over the unidirectional channel. 

78. (New) The apparatus of claim 77 wherein, in addition to the first and 

second keys, at least one of an algorithm and a parameter are transmitted to the requestor to 

decrypt the service. 
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